Bump the production-dependencies group across 1 directory with 3 updates

[dependabot]

Bumps the production-dependencies group with 3 updates in the / directory: deepagents, langchain-openai and python-dotenv.

Updates deepagents from 0.4.1 to 0.4.5

Release notes

Sourced from deepagents's releases.

deepagents==0.4.5

Changes since deepagents==0.4.4 release(deepagents): 0.4.5 (#1622) chore(sdk): expand eval model matrix to 28 models across 7 providers (#1617) chore: remove unnecessary @pytest.mark.asyncio decorators (#1616) chore(sdk): update evals to use chat model instance (#1614) fix(sdk): make evals more robust across model output variations (#1608) fix(infra): streamline evals workflow and summary (#1602) docs(sdk): improve docstrings around summarization conditions (#1597) chore(sdk): add json report to evals (#1594) chore(sdk,cli): switch claude-sonnet-4-5-20250929 -> claude-sonnet-4-6 (#1590) feat(cli): /compact command (#1579) chore: standardize makefile type targets/ add type CI check (#1581) ci(sdk): skip some evals (#1580) docs(sdk): rename 'prompt' to 'system_prompt' in subagent keys (#1578) docs(sdk): docstring fixes for summarization.py (#1568) chore(sdk): remove unused base_path alias in skills.py (#1543) chore(deps): bump the pip-dependencies group across 8 directories with 17 updates (#1564) fix(sdk,cli,deps): support timeout=0 for sandbox execute() (#1558) fix: Potential fixes for 2 code quality findings (#1534) fix: Variable defined multiple times (#1536) feat(cli,sdk): compaction hook (#1420) chore(deps): bump the pip-dependencies group across 8 directories with 19 updates (#1491)

---

Thanks to our contributors: @​AdemBoukhris457, @​AlexPapadakis, @​eyurtsev

deepagents==0.4.4

Changes since deepagents==0.4.3 release(deepagents): 0.4.4 (#1519) fix(sdk): use consistent path stripping in CompositeBackend grep and glob (#1504) fix(sdk): add timeout to glob in FilesystemMiddleware (#1508) fix(sdk): validate tool_call_id before subagent invocation (#1506) fix(sdk): bundle read template params into single base64 payload (#1500) fix(deepagents): preserve ToolMessage artifact when evicting large outputs (#1482) fix(sdk): fix glob matching with ** in _python_search fallback (#1350) fix(sdk): sanitize paths in BaseSandbox ls_info and read templates (#1484) docs(sdk): fix SkillsMiddleware.before_agent docstring to reflect caching behavior (#1495) perf(sdk): parallelize summarization offload and LLM summary generation (#1488) chore(sdk): add coverage to Makefile (#1493) perf(sdk): batch memory source loading into a single download_files call (#1490)

---

Thanks to our contributors: @​dotuananh0712, @​AdemBoukhris457, @​OiPunk

deepagents==0.4.3

Changes since deepagents==0.4.2 release(deepagents): 0.4.3 (#1465)

... (truncated)

Commits

• 37b157e release(deepagents): 0.4.5 (#1622)
• f56b241 test(cli): add help screen drift-detection test (#1621)
• 6067749 fix(cli): add missing flags to help screen (#1619)
• 51c3347 fix(cli): disambiguate /tokens vs /compact token reporting (#1618)
• 8733ca4 chore(sdk): expand eval model matrix to 28 models across 7 providers (#1617)
• a802361 chore: remove unnecessary @pytest.mark.asyncio decorators (#1616)
• a9dc2c5 fix(cli): apply profile overrides in /compact (#1612)
• 9abcf91 chore(sdk): update evals to use chat model instance (#1614)
• 2e3cb74 feat(cli): show summarization status and notification (#919)
• 611a9e9 fix(sdk): make evals more robust across model output variations (#1608)
• Additional commits viewable in compare view

Updates langchain-openai from 1.1.9 to 1.1.10

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.1.10

Changes since langchain-openai==1.1.9

release(openai): 1.1.10 (#35292) feat(openai): support automatic server-side compaction (#35212) fix(openai): add model property (#35284) fix(nomic,openai,perplexity): update pillow version to >= 12.1.1, <13.0.0 (#35254) docs(openai): more nits (#35277) docs(openai): clarify reasoning config for openai-compatible endpoints (#35202) fix(openai): gpt-5.2-pro Model Profile structured_output key fixed (#35216) chore(openai): extend model_token_mapping till gpt-5.2 for modelname_to_contextsize (#35214) fix(openai): enhance error message for non-OpenAI embedding providers (#35252) fix(openai): sanitize chat completions text content blocks (#35217) fix(openai): improve error message for null choices in OpenAI-compatible APIs (#35236) feat(openrouter): add langchain-openrouter provider package (#35211) chore: bump pillow from 11.3.0 to 12.1.1 in /libs/partners/openai (#35177) chore(deps): bump langsmith from 0.4.37 to 0.6.3 in /libs/partners/openai (#35151)

Commits

• 6fe7845 release(openai): 1.1.10 (#35292)
• ba3ad67 fix(core): preserve index and timestamp fields when merging (#34731)
• 0a56124 docs(core): add security warnings and best practices for deserialization (#35...
• f7dbdab docs: fix docstring inaccuracies and update outdated LangSmith URLs (#35283)
• 8f1bc0d feat(openai): support automatic server-side compaction (#35212)
• 32c6ab3 fix(openai): add model property (#35284)
• 4150bb5 fix(mistralai): update test (#35270)
• dba5266 chore: bump langchainhub from 0.1.18 to 0.1.21 in /libs/langchain in the lang...
• 338fd02 chore: bump transformers from 5.1.0 to 5.2.0 in /libs/text-splitters in the o...
• c997955 chore(infra): updates for openrouter/ollama (#35278)
• Additional commits viewable in compare view

Updates python-dotenv from 1.2.1 to 1.2.2

Release notes

Sourced from python-dotenv's releases.

v1.2.2

Added

• Support for Python 3.14, including the free-threaded (3.14t) build. (#)

Changed

• The dotenv run command now forwards flags directly to the specified command by @​bbc2 in theskumar/python-dotenv#607
• Improved documentation clarity regarding override behavior and the reference page.
• Updated PyPy support to version 3.11.
• Documentation for FIFO file support.
• Support for Python 3.9.

Fixed

• Improved set_key and unset_key behavior when interacting with symlinks by @​bbc2 in #790c5
• Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by @​JYOuyang in theskumar/python-dotenv#590

Breaking Changes

• dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

• In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

• dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

Misc

• skip 000 permission tests for root user by @​burnout-projects in theskumar/python-dotenv#561
• Bump actions/checkout from 5 to 6 in the github-actions group by @​dependabot[bot] in theskumar/python-dotenv#593
• Add Windows testing to CI by @​bbc2 in theskumar/python-dotenv#604
• Improve workflow efficiency with best practices by @​theskumar in theskumar/python-dotenv#609
• Remove the use of sh in tests by @​bbc2 in theskumar/python-dotenv#612

New Contributors

• @​JYOuyang made their first contribution in theskumar/python-dotenv#590
• @​burnout-projects made their first contribution in theskumar/python-dotenv#561
• @​cpackham-atlnz made their first contribution in theskumar/python-dotenv#597

Full Changelog: theskumar/python-dotenv@v1.2.1...v1.2.2

Changelog

Sourced from python-dotenv's changelog.

[1.2.2] - 2026-03-01

Added

• Support for Python 3.14, including the free-threaded (3.14t) build. (#588)

Changed

• The dotenv run command now forwards flags directly to the specified command by [@​bbc2] in #607
• Improved documentation clarity regarding override behavior and the reference page.
• Updated PyPy support to version 3.11.
• Documentation for FIFO file support.
• Dropped Support for Python 3.9.

Fixed

• Improved set_key and unset_key behavior when interacting with symlinks by [@​bbc2] in [790c5c0]
• Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@​JYOuyang] in #590

Breaking Changes

• dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

• In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

• dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

Commits

• 36004e0 Bump version: 1.2.1 → 1.2.2
• eb20252 docs: update changelog for v1.2.2
• 790c5c0 Merge commit from fork
• 43340da Remove the use of sh in tests (#612)
• 09d7cee docs: clarify override behavior and document FIFO support (#610)
• c8de288 ci: improve workflow efficiency with best practices (#609)
• 7bd9e3d Add Windows testing to CI (#604)
• 1baaf04 Drop Python 3.9 support and update to PyPy 3.11 (#608)
• 4a22cf8 ci: enable testing on Python 3.14t (free-threaded) (#588)
• e2e8e77 Fix license specifier (#597)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions